Skills for AI agents: comparing four incompatible approaches

Описание и применение

Текст описывает четыре несовместимых подхода к добавлению навыков в AI‑агентов и предоставляет матрицу сравнения и статический скрипт аудита, позволяющий оценить происхождение, версионирование, разрешения и исполняемый контент навыков.

Задача

Choosing a skill framework for an AI agent is ambiguous because the term ‘skill’ can refer to four distinct architectures—instruction, trained, local package, or registry—each with different trust boundaries, update paths, and risks.

Результат

Teams can systematically compare skill approaches, identify risks, and choose the most appropriate architecture. The audit script demonstrates how to catch flaws in a demo skill, ensuring safer deployment.

Рабочий процесс

• 1. Identify the skill type (instruction, trained, local package, registry).
• 2. Gather provenance information (Git commit, training run, registry publisher).
• 3. Verify versioning (file diff, artifact hash, semver, pinned digest).
• 4. Assess permissions (agent tools, manifest declarations, publisher policy).
• 5. Check for executable content (scripts, binaries, remote execution).
• 6. Run the static audit script on the skill artifacts.
• 7. Review audit results and decide on the appropriate skill approach.

Доказательства

"Add a skill to the agent" can mean four different things: write a Markdown instruction, retrain the model, drop a folder of scripts into the repository, or install something by name from a remote catalog.

Источник

The four audit criteria are deliberately boring, because boring criteria are the ones that catch incidents: Provenance, Versioning, Permissions, Executable content.

Источник

We will create a small local-package skill called changelog-summarizer. It has an instruction file, a manifest and one shell script.

Источник